isci: fix ssp response iu buffer size in isci_tmf
In isci_task_request_complete() we save the response/sense data from the command. Make sure isci_tmf has enough space to hold the full response. [ it does not look like we actually use this data, and response_data_len/sense_data_len should be specifying the byte count, in any event do the simple fix first so we don't corrupt memory ] Reported-by: Adam Gruchala <adam.gruchala@intel.com> Tested-by: Edmund Nadolski <edmund.nadolski@intel.com> Signed-off-by: Dan Williams <dan.j.williams@intel.com>
This commit is contained in:
parent
0d0cf14c9b
commit
360b03ed17
|
@ -100,7 +100,8 @@ struct isci_tmf {
|
|||
union {
|
||||
struct ssp_response_iu resp_iu;
|
||||
struct dev_to_host_fis d2h_fis;
|
||||
} resp;
|
||||
u8 rsp_buf[SSP_RESP_IU_MAX_SIZE];
|
||||
} resp;
|
||||
unsigned char lun[8];
|
||||
u16 io_tag;
|
||||
struct isci_remote_device *device;
|
||||
|
|
Loading…
Reference in New Issue